Dealing with Uncertainty in Architectural Confidentiality Analysis 1 Dealing with Uncertainty in Architectural Confidentiality Analysis1